Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
File: TuFxPha0_Y8zAYh95qERmARJsp4.mft (raw, json)
Hash identifier: iMtsJ595Vz7Bezrv8VyIO2nu7c4YykNxu7CiBuzCdeM=
Subject key identifier: D3:B5:1F:41:93:AA:F7:5D:71:AE:A5:83:9D:3B:55:F0:2F:AA:AB:0C
Authority key identifier: 4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
Certificate issuer: /CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Certificate serial: 01964EC7CB37C9ADCB4DAB82A05B58407847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 16:00:38 +0000
Manifest this update: Sat 19 Apr 2025 16:00:38 +0000
Manifest next update: Sun 20 Apr 2025 16:00:38 +0000
Files and hashes: 1: IJqJkkG32juZ9JC_-n807ugagLE.roa (hash: a5ckR7gAH5+zi6QRTimZRXE/Wgs09xk/gP8A83O6nQM=)
2: TuFxPha0_Y8zAYh95qERmARJsp4.crl (hash: g11TQfBd5+ldwOzSrtZntwmc5yQkRmPKm6LThEDdGpU=)
3: yXKulFLipTbjSUmowLRqtzSALEA.roa (hash: LNf43mdJtw9mAKFqBqZr/MgvJNf0ToK4qGWZ05MJPz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:cb:37:c9:ad:cb:4d:ab:82:a0:5b:58:40:78:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Validity
Not Before: Apr 19 16:00:38 2025 GMT
Not After : Apr 20 16:00:38 2025 GMT
Subject: CN=d3b51f4193aaf75d71aea5839d3b55f02faaab0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:17:0e:56:de:ea:c8:dc:87:3f:3a:36:31:ff:
8f:3d:ec:6e:f2:d7:f3:02:dd:3e:06:67:78:44:09:
b8:e1:11:de:31:a2:68:fa:a8:14:b0:c6:8d:22:8d:
57:3f:c6:9e:0d:1f:f5:a3:2f:dd:fd:b8:b2:91:05:
a8:14:a6:b1:82:20:84:13:65:9a:5e:26:40:16:a7:
b9:6f:75:c8:1a:9b:d8:ce:2b:5b:89:b6:6b:f4:6f:
9b:74:0a:76:2e:58:2b:b9:92:b3:38:ca:35:2b:28:
f5:3e:d4:1b:dc:8e:4f:5c:68:5e:f3:cc:35:80:18:
ab:21:b3:82:ef:3f:b4:1a:8e:20:75:39:8c:d6:5b:
a2:4f:55:cd:f4:d2:d3:3e:5f:1a:2d:6a:c0:1c:e2:
86:93:35:f9:cf:a8:e5:0f:75:02:37:35:41:2b:04:
89:84:64:de:23:bd:24:1d:58:4d:d8:9b:40:60:c7:
c5:58:6b:bb:47:45:09:93:57:1c:13:e2:89:d6:53:
8d:10:24:41:1d:40:cb:6d:a3:40:16:f0:e9:54:f7:
6d:09:ee:63:e5:11:cf:40:97:43:35:7d:74:a2:9a:
d4:b6:52:26:cb:48:8b:9b:53:19:e7:d9:ff:8a:65:
c4:45:ca:29:ed:1e:7b:11:ea:7a:10:63:65:04:13:
ca:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B5:1F:41:93:AA:F7:5D:71:AE:A5:83:9D:3B:55:F0:2F:AA:AB:0C
X509v3 Authority Key Identifier:
keyid:4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:82:95:59:83:ed:b9:b2:11:3c:06:dc:c9:72:fa:ab:03:92:
9a:f5:97:cc:b5:88:fb:af:a9:20:9c:c3:ff:29:80:3b:c5:ac:
77:2f:29:47:52:86:59:c0:45:06:ee:8c:af:34:c9:be:d2:af:
97:d1:35:c5:2d:17:79:b6:85:30:6e:24:f0:b6:8b:28:51:71:
0b:c4:54:ca:1f:53:e5:84:1e:6d:30:77:73:af:58:0d:aa:66:
68:24:13:f1:9c:dc:14:ef:75:55:f2:ae:6a:be:a3:8b:dc:89:
29:92:71:a7:ff:e2:3d:42:84:c6:78:80:64:85:49:ef:ca:9c:
cb:db:57:20:99:23:86:4b:41:45:9a:03:7e:7f:eb:13:27:0f:
c0:f4:54:2d:0c:8a:47:f3:12:94:92:66:5b:29:78:4f:50:5a:
e0:c7:0a:84:14:f8:de:ae:58:e1:66:b6:33:de:d4:6f:7b:96:
54:3c:29:cb:56:51:7e:d9:84:6e:0b:70:5f:e4:bd:14:b1:2e:
4a:f3:3f:d2:e0:50:5a:28:25:95:2f:de:54:d3:7d:c6:60:ae:
53:b2:ae:44:1c:50:13:c6:46:6c:ac:1f:54:83:64:1d:0a:ca:
f4:33:42:17:47:f7:2b:c1:16:94:0b:55:b8:80:76:6a:d9:e0:
77:84:47:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOx8s3ya3LTauCoFtYQHhHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTE3MTNlMTZiNGZkOGYzMzAxODg3ZGU2YTExMTk4MDQ0
OWIyOWUwHhcNMjUwNDE5MTYwMDM4WhcNMjUwNDIwMTYwMDM4WjAzMTEwLwYDVQQD
EyhkM2I1MWY0MTkzYWFmNzVkNzFhZWE1ODM5ZDNiNTVmMDJmYWFhYjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xcOVt7qyNyHPzo2Mf+PPexu8tfz
At0+Bmd4RAm44RHeMaJo+qgUsMaNIo1XP8aeDR/1oy/d/biykQWoFKaxgiCEE2Wa
XiZAFqe5b3XIGpvYzitbibZr9G+bdAp2LlgruZKzOMo1Kyj1PtQb3I5PXGhe88w1
gBirIbOC7z+0Go4gdTmM1luiT1XN9NLTPl8aLWrAHOKGkzX5z6jlD3UCNzVBKwSJ
hGTeI70kHVhN2JtAYMfFWGu7R0UJk1ccE+KJ1lONECRBHUDLbaNAFvDpVPdtCe5j
5RHPQJdDNX10oprUtlImy0iLm1MZ59n/imXERcop7R57Eep6EGNlBBPK1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNO1H0GTqvddca6lg507VfAvqqsMMB8GA1UdIwQY
MBaAFE7hcT4WtP2PMwGIfeahEZgESbKeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVGeFBoYTBfWTh6QVloOTVxRVJtQVJKc3A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80OGM5ZjYtNWI1Zi00MWQ0LThlNTYt
MDhlNGI3OTM4N2MwLzEvVHVGeFBoYTBfWTh6QVloOTVxRVJtQVJKc3A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80OGM5ZjYtNWI1Zi00MWQ0LThlNTYtMDhlNGI3OTM4N2Mw
LzEvVHVGeFBoYTBfWTh6QVloOTVxRVJtQVJKc3A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYKVWYPt
ubIRPAbcyXL6qwOSmvWXzLWI+6+pIJzD/ymAO8Wsdy8pR1KGWcBFBu6MrzTJvtKv
l9E1xS0XebaFMG4k8LaLKFFxC8RUyh9T5YQebTB3c69YDapmaCQT8ZzcFO91VfKu
ar6ji9yJKZJxp//iPUKExniAZIVJ78qcy9tXIJkjhktBRZoDfn/rEycPwPRULQyK
R/MSlJJmWyl4T1Ba4McKhBT43q5Y4Wa2M97Ub3uWVDwpy1ZRftmEbgtwX+S9FLEu
SvM/0uBQWigllS/eVNN9xmCuU7KuRBxQE8ZGbKwfVINkHQrK9DNCF0f3K8EWlAtV
uIB2atngd4RHiQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:20 2025 by rpki-client